
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
File: mpGLgMuzJzekayRIaaatVQlUP6E.mft (raw, json)
Hash identifier: BUgeod7IcCdfdrcTB7VqJWxYfkSkqVhPhA9nEBexXoo=
Subject key identifier: 57:14:9A:0E:0A:47:6A:29:60:EE:DE:00:1D:C7:99:DA:2B:BF:74:11
Authority key identifier: 9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1
Certificate issuer: /CN=9a918b80cbb32737a46b244869a6ad5509543fa1
Certificate serial: 019D2772581E566551A828CF4225F584CB4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
Manifest number: 0C2E
Signing time: Thu 26 Mar 2026 00:01:38 +0000
Manifest this update: Thu 26 Mar 2026 00:01:38 +0000
Manifest next update: Fri 27 Mar 2026 00:01:38 +0000
Files and hashes: 1: V7JsXJ0GLKjgHsCk3ewLigNI5bU.roa (hash: h3m+52oeLH7xOWJ+THQYW7O1i1kOSNXejnm2XZ2qwIU=)
2: mpGLgMuzJzekayRIaaatVQlUP6E.crl (hash: Tku3Qoy96T544ghosKX9P2saqsURQQdJT3/jpAdeRzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:58:1e:56:65:51:a8:28:cf:42:25:f5:84:cb:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a918b80cbb32737a46b244869a6ad5509543fa1
Validity
Not Before: Mar 26 00:01:38 2026 GMT
Not After : Mar 27 00:01:38 2026 GMT
Subject: CN=57149a0e0a476a2960eede001dc799da2bbf7411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:be:c0:4e:42:32:74:c0:e3:45:de:ae:17:1b:
b7:9e:2a:e6:ad:27:57:21:cb:73:a1:fa:b0:d3:e3:
90:cf:60:f0:d3:ed:e8:6d:1b:33:65:66:64:e9:46:
f4:13:3c:d0:f4:39:0c:03:e3:d7:5f:74:22:c8:d4:
e6:02:81:f3:31:05:03:01:88:82:aa:1f:24:55:c4:
8a:03:09:2e:6f:90:19:bb:23:67:7d:a8:4f:9e:74:
3a:dc:85:7a:5f:19:7f:b4:10:0c:e3:bd:f5:51:c1:
a6:91:0d:7e:29:fa:51:f6:b7:6c:27:ba:5d:a1:d1:
a4:f0:2a:76:7d:d2:59:a3:16:9e:3c:e4:75:9f:2c:
32:7d:b1:f9:d0:74:7a:50:d9:a2:c2:42:c7:29:7d:
73:9c:43:ab:7f:66:a7:2a:1c:e3:8b:10:89:ab:8e:
b0:07:c7:0f:f8:0f:6b:28:52:fd:35:a5:47:dd:33:
9e:54:8b:99:20:93:c0:cb:5b:5f:d7:7a:03:b7:78:
cf:0a:73:76:f8:5b:77:4d:a3:53:0f:82:d6:0c:e9:
63:ca:0e:e4:ad:85:58:1d:da:47:12:3e:1b:b7:4b:
0e:c7:bb:0c:56:4c:8d:2c:e7:3f:f2:5e:ff:cb:c9:
83:ca:71:e1:33:f1:14:fd:a6:8c:e6:92:7b:3a:60:
17:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:14:9A:0E:0A:47:6A:29:60:EE:DE:00:1D:C7:99:DA:2B:BF:74:11
X509v3 Authority Key Identifier:
keyid:9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:8f:89:6f:0c:ee:d3:e4:fa:79:40:68:21:f9:93:8b:84:a3:
70:fc:b4:5c:58:be:cd:02:ff:53:bf:a8:66:07:ce:8e:b6:5c:
0f:63:00:27:63:b0:1f:f1:76:fe:59:d6:a7:cf:4b:8f:68:38:
3d:57:d3:ab:80:ee:ce:44:82:c6:0e:e5:be:dc:73:ea:ce:b3:
76:16:ea:7d:49:bd:1f:22:10:d6:81:e9:d7:6b:e5:b0:f4:da:
48:28:a3:ed:ae:71:77:23:f2:da:f8:e7:41:67:cf:61:f2:2f:
54:9d:de:2d:0d:0a:c8:47:78:d3:68:36:3a:5a:4f:ff:a1:fd:
6e:9c:76:e5:ea:25:c7:03:03:a8:71:16:7b:ba:d7:62:e7:36:
96:fc:ee:cd:63:a0:be:22:d6:63:88:ba:b2:78:b2:d4:37:c2:
63:71:44:96:b8:77:1f:62:66:b8:6d:61:a7:74:b7:a4:28:d1:
18:80:bc:e0:2b:ca:41:8d:26:00:a6:78:5e:2c:16:45:aa:85:
be:09:e0:20:f7:aa:de:08:e2:d1:cf:a0:3d:be:80:c3:ea:bd:
2e:d4:c7:9b:63:20:26:15:c8:61:2a:c6:61:61:22:85:4b:f9:
8e:18:e6:81:11:ef:8e:99:ef:ef:d9:67:fe:20:fd:b4:9b:c7:
00:1f:5b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:56:17 2026 by rpki-client